Binance Taps Half Its SAFU Bitcoin Holdings After Major Hack

Following a record-breaking cyberattack, the cryptocurrency exchange Binance utilized roughly half of its emergency user protection reserve, leaving its designated wallet with significantly fewer digital assets. On Monday, the publicly disclosed emergency Bitcoin wallet held about half its prior balance after the platform deployed resources to cover losses resulting from a recent multibillion-dollar breach. Records confirmed a transfer of 7,499 Bitcoin on Saturday, directly linked to the partial deployment of the Secure Asset Fund for Users, commonly known as the binance safu fund.

As of Monday, the wallet held approximately 7,500 Bitcoin, valued at $583 million, dropping from roughly 15,000 Bitcoin prior to the transaction. The digital currency theft forced the exchange to temporarily halt customer withdrawals while management worked on asset replacement. The United States Federal Bureau of Investigation attributed the security incident to North Korean actors known as TraderTraitor.

Reopening Withdrawals and Replenishing Assets

Starting Sunday, the platform began restoring customer withdrawals in a phased approach. Executives reported that approximately 95% of impacted assets had been replenished, showing improvement from ninety percent the previous day. Acquisition of remaining, less-liquid tokens continued through a combination of market and over-the-counter transactions. To cover these financial damages, the enterprise utilized resources from its corporate treasury, the user protection fund, and a portion of its futures insurance mechanism.

Binance reduced its emergency user protection Bitcoin balance by half to cover losses from a massive cyberattack.

Policy guidelines for the reserve outline periodic monitoring and rebalancing of market values. Official documentation notes that if the market value drops beneath $800 million due to price fluctuations, management will restore the valuation to $1 billion. However, existing policy guidelines do not specify a strict timeline for replenishing funds withdrawn during a security breach.

Additionally, the enterprise announced that clients could verify account balances using a Saturday proof-of-reserves snapshot following the completion of cryptographic verification. This documentation demonstrated that user holdings across ten distinct cryptocurrencies, including Bitcoin, Ether, and Tether, maintained at least a one-to-one backing ratio. A subsequent snapshot covering a wider array of tokens is scheduled, with verification expected to require forty to fifty hours.

Why it matters

The partial depletion of the prominent user protection reserve highlights the severe financial impact of major cryptocurrency thefts on centralized platforms and demonstrates how exchanges absorb systemic shocks. While operations and withdrawals resume for clients globally, the lack of a defined timeline for restoring the reserve fund leaves questions open regarding long-term emergency readiness.